Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.492 exploits

Referência

CVE-2010-1471

CVE-2010-1471—

Directory traversal vulnerability in the AddressBook (com_addressbook) component 1.5.0 for Joomla! allows remote attacke

43RISCO

abrir ↗

Referência

CVE-2018-1218

CVE-2018-1218—

In Dell EMC NetWorker versions prior to 9.2.1.1, versions prior to 9.1.1.6, 9.0.x, and versions prior to 8.2.4.11, the '

28RISCO

abrir ↗

Referência

CVE-2015-3088

CVE-2015-3088—

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows an

35RISCO

abrir ↗

Referência

CVE-2016-3473

CVE-2016-3473—

Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0,

28RISCO

abrir ↗

Referência

CVE-2013-3526

CVE-2013-3526—

Cross-site scripting (XSS) vulnerability in js/ta_loaded.js.php in the Traffic Analyzer plugin, possibly 3.3.2 and earli

43RISCO

abrir ↗

Referência

CVE-2020-5726

CVE-2020-5726—

The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A rem

23RISCO

abrir ↗

Referência

CVE-2017-10246

CVE-2017-10246—

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: iHelp). Suppo

28RISCO

abrir ↗

Referência

CVE-2021-31933

CVE-2021-31933HIGH

A remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input sanitization of a paramete

46RISCO

abrir ↗

Referência

CVE-2018-4237

CVE-2018-4237—

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS b

43RISCO

abrir ↗

Referência

CVE-2013-6127

CVE-2013-6127—

The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53

28RISCO

abrir ↗

Referência

CVE-2017-11152

CVE-2017-11152—

Directory traversal vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 all

28RISCO

abrir ↗

Referência

CVE-2016-1879

CVE-2016-1879—

The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, w

28RISCO

abrir ↗

Referência

CVE-2016-1879

CVE-2016-1879—

The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, w

28RISCO

abrir ↗

Referência

CVE-2019-1149

CVE-2019-1149HIGH

Microsoft Graphics Remote Code Execution Vulnerability

46RISCO

abrir ↗

Referência

CVE-2019-3810

CVE-2019-3810MEDIUM

A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported vers

38RISCO

abrir ↗

Referência✓ VexDay Proof

Seagull 0.6.3 - 'files' Remote File Disclosure

CVE-2008-0465—webappsphp

Directory traversal vulnerability in optimizer.php in Seagull 0.6.3 allows remote attackers to read arbitrary files via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Comodo AntiVirus 2.0 - 'ExecuteStr()' Remote Command Execution

CVE-2008-0470—remotewindows

A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteS

35RISCO

abrir ↗

Referência

CVE-2009-4722

CVE-2009-4722—

SQL injection vulnerability in the CheckLogin function in includes/functions.php in Limny 1.01, when magic_quotes_gpc is

23RISCO

abrir ↗

Referência

CVE-2017-7478

CVE-2017-7478—

OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control

28RISCO

abrir ↗

Referência

CVE-2015-7874

CVE-2015-7874—

Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary

28RISCO

abrir ↗

Referência

CVE-2012-4330

CVE-2012-4330—

The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long

28RISCO

abrir ↗

Referência

CVE-2009-4724

CVE-2009-4724—

SQL injection vulnerability in shop.htm in PaymentProcessorScript.net PPScript allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2019-6545

CVE-2019-6545—

AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition)

28RISCO

abrir ↗

Referência

CVE-2024-8945

CVE-2024-8945MEDIUM

CodeCanyon RISE Ultimate Project Manager save sql injection

38RISCO

abrir ↗

Referência

CVE-2018-12463

CVE-2018-12463HIGH

MFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilities

46RISCO

abrir ↗

Referência

Microsoft Windows Server 2025 Hyper-V NT Kernel Integration VSP - Elevation of Privilege

CVE-2025-21333HIGHsob ataquelocalwindows

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

71RISCO

abrir ↗

Referência✓ VexDay Proof

exV2 < 2.0.4.3 - 'extract()' Remote Command Execution

CVE-2006-7079—webappsphp

Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite

28RISCO

abrir ↗

Referência

CVE-2010-1599

CVE-2010-1599—

SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2010-1604

CVE-2010-1604—

Multiple SQL injection vulnerabilities in admin_login.php in NCT Jobs Portal Script allow remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2021-25681

CVE-2021-25681—

AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. T

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.